src/security/TOTP.ts

import crypto from "node:crypto";

class TOTP {
    public static T0 = 0;
    public static STEP = 30;
    public static LENGTH = 6;
    public static ALGORITHM = "sha1";

    public static generate(secret: string, time: number = Date.now() / 1000): string {
        const secretBuffer = Buffer.from(secret, "ascii");
        const timeBuffer = Buffer.alloc(8);
        timeBuffer.writeBigInt64BE(BigInt(Math.floor(time / TOTP.STEP)), 0);
        const hmac = crypto.createHmac(TOTP.ALGORITHM, secretBuffer);
        hmac.update(timeBuffer);
        const hash = hmac.digest();
        const offset = hash[hash.length - 1] & 0xf;
        const binary = (hash.readUInt32BE(offset) & 0x7fffffff) % Math.pow(10, TOTP.LENGTH);
        return binary.toString().padStart(TOTP.LENGTH, "0");
    }

    public static verify(secret: string, token: string, time: number = Date.now() / 1000): boolean {
        return TOTP.generate(secret, time) === token;
    }

    public static generateSecret(length: number = 16): string {
        return crypto
            .randomBytes(length)
            .toString("ascii")
            .replace(/[^a-zA-Z0-9]/g, "");
    }
}

export default TOTP;
1	rakinar2	577	import crypto from "node:crypto";
2
3			class TOTP {
4			public static T0 = 0;
5			public static STEP = 30;
6			public static LENGTH = 6;
7			public static ALGORITHM = "sha1";
8
9			public static generate(secret: string, time: number = Date.now() / 1000): string {
10			const secretBuffer = Buffer.from(secret, "ascii");
11			const timeBuffer = Buffer.alloc(8);
12			timeBuffer.writeBigInt64BE(BigInt(Math.floor(time / TOTP.STEP)), 0);
13			const hmac = crypto.createHmac(TOTP.ALGORITHM, secretBuffer);
14			hmac.update(timeBuffer);
15			const hash = hmac.digest();
16			const offset = hash[hash.length - 1] & 0xf;
17			const binary = (hash.readUInt32BE(offset) & 0x7fffffff) % Math.pow(10, TOTP.LENGTH);
18			return binary.toString().padStart(TOTP.LENGTH, "0");
19			}
20
21			public static verify(secret: string, token: string, time: number = Date.now() / 1000): boolean {
22			return TOTP.generate(secret, time) === token;
23			}
24
25			public static generateSecret(length: number = 16): string {
26			return crypto
27			.randomBytes(length)
28			.toString("ascii")
29			.replace(/[^a-zA-Z0-9]/g, "");
30			}
31			}
32
33			export default TOTP;